Capabilities/sets for loan override renewal do not provide enough permissions for a user

Description

Overview:

In FOLIO, the following permissions allow user to view user loans and renew them via an override:

  • { internal: 'ui-users.loans.view', gui: 'Users: User loans view' },

  • { internal: 'ui-users.loans.renew', gui: 'Users: User loans renew' },

  • { internal: 'ui-users.loans.renew-override', gui: 'Users: User loans renew through override' },

Corresponding capabilities/sets in Eureka (both sets and capabilities need to be assigned):

  • resource: UI-Users Loans
    action: view
    permission: ui-users.loans.view

  • resource: UI-Users Loans Renew
    action: execute
    permission: ui-users.loans.renew

  • resource: UI-Users Loans Renew-Override
    action: execute
    permission: ui-users.loans.renew-override

When the capabilities and sets above are assigned to a user (directly or via a role), a user cannot perform a loan renewal via an override.

Preconditions:

A user loan with maximum renewals performed should exists in the system (such loan can only be renewed via an override).

On , the following user has such loan -

Steps to reproduce:

  1. Login to

  2. Go to “Users“ app

  3. Open a user having a loan with maximum renewals performed from Preconditions

  4. Expand “Loans“ accordion

  5. Click on a link “… open loans“

  6. Click on ellipsis in the row for a loan from Preconditions → Select “Renew“ option

  7. In modal, click on “Override“ button

  8. Select a checkbox in a loan row in modal

  9. Fill any text in the text field, and click on “Override“ button

  10. Click on a row for a loan from Precoditions

Expected result:
A loan is renewed via override. In loan details view:

  • “Action”: “Renewed through override“

  • “Renewal count“: 1

Actual result:
A loan is not renewed. In loan details view, “Renewed through override“ text is not shown, “Renewal count“ is “-“.
In DevTools, POST /circulation/renew-by-barcode request fails with 422 status and the following response body:

Additional info:

  • Not reproducible on Snapshot

  • GET /capabilities response contains the following capability:

  • Related test case/auto-test: C569

  • See example:

 

Environment

None

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Estimation Notes and Assumptions

None

RCA Group Details

None

Attachments

2

Checklist

hide

Activity

Show:

Yauhen Viazau October 18, 2024 at 5:22 PM

Tested on https://folio-etesting-snapshot2-diku.ci.folio.org/ - not reproducible

Assumed to be fixed by

See example:

- Issue is still active on https://crs-sandbox2.int.aws.folio.org. The update which had fixed it (presumably, MODUSERSKC-52) should be deployed there and it has to be re-tested there after that.

Yauhen Viazau October 2, 2024 at 9:56 AM
Edited

Tested on https://crs-sandbox2.int.aws.folio.org after QCSP4 updates - issue is still reproducible
Also still active on https://folio-etesting-snapshot-diku.ci.folio.org/

Yauhen Viazau September 12, 2024 at 1:53 PM

Still active on evrk2 ( )

Cannot Reproduce

Details

Assignee

Reporter

Development Team

Eureka

RCA Group

Not a bug anymore

Story Points

Sprint

Priority

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created September 6, 2024 at 11:02 AM
Updated October 25, 2024 at 12:34 PM
Resolved October 25, 2024 at 12:34 PM
TestRail: Cases
TestRail: Runs